BUG allowing record edition in a private application

BUG allowing record edition in a private application

I have an application embed in my website and it's allowing record edition in this private application, so anyone who access the website can edit even delete the record.

Here's the link: http://christian-directory.org/Main_Menu.aspx

You need to click on "Churches", then click on "All Denominations" and you will see the "edit" box than only should be available when I'm logged in in Zoho, but instead is always available for anyone.

Please let me know what to do, is this a bug or is it has something to do with the free zoho creator account?

Thanks,

Ed Silva.